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1.  Introduction 


The  language  £,  has  been  defined  so  that  aU  Ella  programs  can  be  expressed  in 
it.  Although  it  is  very  primitive  and  does  not  even  have  such  concepts  as  functions 
or  indexing,  mechanisms  already  exist  for  the  transformation  of  general,  high-level 
Ella  into  a  form  not  far  removed  from  the  £  expression  (see  (l]  and  [2j).  However, 
once  reduced  into  £,  Ella  progrSLms  can  not  be  recovered  in  their  original  form.  For 
the  purposes  of  equivalence  testing  there  is  no  need  for  this. 

Expressions  in  £  are  defined  inductively  from  the  basic  units  of  type  constants 
and  variables  (input  signals).  Since  the  definition  is  inductive,  all  functions  which 
I  create  to  operate  on  such  expressions  are  also  defined  using  structural  induction. 
However,  such  functions  operate  from  the  top  down,  breaking  expressions  into  their 
component  parts  as  they  are  applied;  while  the  expressions  themselves  are  defined 
from  the  roots  up.  This  distinction  is  in  practice  obvious  and  in  only  one  case  causes 
problems. 

The  mathematical  notation  used  in  the  definitions  is  mostly  standard;  Greek 
letters  are  used  to  represent  general  expressions;  the  letter  t  usually  represents  a 
general  time  (natural  number);  k  is  used  for  a  general  type  constant;  v  and  w  for 
general  variable  names;  a  for  a  general  type.  Capital  letters  usually  indicate  sets  or 
sequences.  Sequences  are  ordered  sets,  and  are  listed  using  angle  bracket  delimiters, 

eg 

5  =  (5,...5„) 

Sequences  are  indexed  using  a  subscript  notation,  eg  A,  is  the  t***  element  of  the 
sequence  A. 

A  notation  is  needed  to  represent  the  set  of  pairs  of  items.  For  example,  a 
compound  type  is  either  a  basic  type  or  a  pair  of  other  compound  types.  I  denote 
this  sort  of  structure  x*.  Such  sets  are  formally  defined  in  Appendix  A. 
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2.  Expressions  in  L 


is  a  structure  consisting  of: 

S  types,  eg  S  '  {BOOL,  NUM,  DATA}. 

{5,},6s  constants,  eg  5bool  =  {T,F).  Sequences  S,  disjoint, 
variables,  eg  a,b,c,in,cntrl-line  €  Vbool. 

Sequences  V,  disjoint. 

£  expressions 
{-L»}i6S  bottom 

Each  language  contains  all  the  types  (with  their  corresponding  enumerated 
type  constants)  and  variable  names  that  can  be  used  in  expressions  in  that  language. 
Expressions  in  different  languages  £g  and  £g>  are  not  directly  comparable;  they  must 
be  re-expressed  in  the  superset  language  £so9'. 

For  each  type  s  in  the  language,  there  is  a  ‘bottom’,  ±,.  This  is  the  undefined 
value  and  is  ast  accessible  to  the  user.  Its  only  function  is  to  serve  as  the  limit  value 
in  the  approximation  of  recursive  loops,  as  will  be  seen  later. 

Variables  are  ordered,  perhaps  alphabetically.  This  is  to  help  establish  a  unique 
form  for  expressions,  as  is  shown  at  the  end  of  this  paper. 


2.1  DEFINITION  E  is  the  least  set  s.t. 


S,  c  E 
V,  cE 

delay  AtO  €  E 
pair  (o,  /9)  €  E 
case  Oa:^  €  E 
recurse  fiv.a  6  E 


Vs€S 

Vs€S 

Vo  €  E,  Vt  e  S,  s.t.  type{a)  =  s 
Vo,)^  €  E 

Vo  6  E,  C  E  s.t.  welldefo(o,  >1) 
Vu  €  V„  Vo  €  E  s.t.  welldef^(v,  o) 


The  above  defines  the  syntax  of  jCg  expressions.  An  expression  in  E  is  either  a 
constant  or  variable,  or  constructed  out  of  such  by  the  pair,  delay,  case  or  recursion 
operators.  Illegal  expressions,  such  as  badly-typed  case  expressions,  are  not  allowed: 
see  Appendix  A  for  definitions  of  ‘type’,  ‘welldefn’  and  ‘welldef^’. 

Pairing  is  the  only  form  of  structuring  provided:  tuples  are  not  needed.  Indexing 
of  pairs  is  also  not  required  since  obviously  in  an  expressional  language  without 
functions,  (a,  ^)|1|  =  a  and  (a,^){2]  =  0.  A  case  statement  Do: A  outputs  at  any 
time  unit,  one  of  the  expressions  in  the  sequence  A.  The  expression  chosen  is  indexed 
by  the  value  of  the  chooser  o  at  that  time.  The  recursive  operator  itv.a  outputs  the 
value  of  u,  where  v  is  let  equal  to  a.  Of  course,  a  usually  contains  some  delayed 
instance  of  the  dummy  variable  u,  so  that  a  feedback  loop  is  produced.  Pictorially, 
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this  can  be  represented  as; 


An  example  of  a  legal  £  expression; 

(ATArKnel,  |>register.C3ctrl:(AFregister,  Iine2)) 
This  would  correspond  to  the  Ella  unit  (see  jS)): 

BEGIN 

FN  REG  “  (bool;  register)  ->  bool; 

CASE  Ctrl  OF  t:  DEL(f}  register, 
f:  line2 

ESAC. 

MAKE  REG;  reg. 

LET  register  ■  reg. 

JOIN  register  ->  reg. 

OUTPUT  (DEL{t)  DEL(t>  linel.  register) 
END 


Or  in  graphical  form: 


linel  — 


Iine2- 


Ctrl 
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2.2  DEFINITION  evaluate, ,v  :  E — ►  xU.6s^* 
t  €  N,  V valuation 

Returns  the  value  oj  an  expression  given  a  valuation  V. 
evaluatety(A;)  ^  k,  Vk  €  S, 

evaluate, y(v)  ^  the  value  of  v  in  valuation  V  at  time  t. 
evaluate,, v(Aka)  ®  evaluate,_iy(a)  t>0 
k  1=0 

evaluate,y((a, /?))  *  (evaluate,y  (a),  evaluate, y(/3)) 
evaluate,y(Oa:^)  s  evaluate,  v(.^n) 

where  n  ®  «  s.t.  (5,yp,(a)),  =  evaluate, ,v (ft) 
evaluate,, v(f<v. ft)  =  evaluate, y' (ft) 

where  V  s  V  UU‘„Z\{(vt-„,  evaluate, .„.v(Mw.a))} 

This  function  defines  the  result  of  evaluating  an  expression;  in  other  words,  it 
gives  the  setnantics  of  E.  A  valuation  is  simply  a  set  which  contains  a  cojistant 
assignment  to  each  external  variable  in  the  expression,  at  every  time  unit:  that  is, 
pairs  of  the  form  {vi,k)  where  variable  v  is  to  have  value  k  at  time  1. 

The  delay  operator  A^ft  delays  signal  a  by  one  time  unit.  At  time  0  it  outputs 
instead  its  initialization  constant  k. 

As  an  example  of  the  evaluation  of  the  case  expression,  consider  0(8,  b):>I  where 
a  and  b  are  Boolean  variables.  The  equivalent  Ella  for  this  expression  is; 


CASE  (a.b)  OF  (t.t); 

(f  .t): 

Ate 

(t.f): 

(f  .f): 

A4 

ESAC 

For  each  possible  value  of  the  chooser  (a,  b),  there  must  be  a  corresponding  ex¬ 
pression  in  A.  That  is,  there  is  no  partial  choice  in  £.  The  order  in  which  expressions 
in  A  are  chosen  depends  on  the  orderering  on  the  basic  enumerated  types.  The  above 
example  assumes  that  BOOL  =  (T,F),  so  the  ‘True’s  come  first.  5(bool,bool)  is  the 
sequence  which  contains  all  possible  constant  values  of  (a,  b);  it  is  defined  in  Ap¬ 
pendix  A  to  equal  ((T,T),(F,T),  (T,F),(F,T)).  As  you  can  see,  it  is  simply  the  cross 
product  of  Sbool  with  itself,  with  the  convention  that  the  first  position  changes  more 
rapidly. 

A  recursive  expression  is  evaluated  by  adding  its  previous  values  to  the  valuation 
of  its  dummy  variable. 
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It  is  possible,  though  perhaps  lengthy,  to  express  any  Ella  circuit  in  £,  no  matter 
how  convoluted  it  is.  For  example,  here  is  an  RS  latch: 

(MV.ArD(r,  |»w.AfD(w, s):(F, F, F, T)):{F, F, F,T), 
<iw.AFa(pv.ArQ(r, v):(F, F, F, T),  s):{F, F, F, T)) 


3.3  DEFINITION  s 

Eguivalenee  in  E. 

a=.  (3  iff  evaluate(.v(«)  =  evaluate!, v(/?) 

Vt  =  0...OO 
V  valuations  V 

Clearly  two  expressions  are  equivalent,  no  matter  how  they  are  expressed,  if  at 
every  time  they  evaluate  to  the  same  result  for  every  combination  of  input  values. 
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3.  Reduction  into  Finite  Expressions  E* 


Equivalence  testing  in  £  is  not  feasible  since  the  behaviour  of  compared  circuits 
must  be  checked  at  gU  time  steps,  from  0  to  oo.  Is  there  a  way  to  determine  circuit 
equivalence  in  finite  time?  Since  the  definition  of  E  is  by  structural  induction,  we 
know  that  all  expressions  in  E  have  finite  ‘size’.  Furthermore,  we  can  assume  that  all 
types  in  finite,  since  they  are  meant  to  represent  enumerated  Ella  types. 

So  it  is  clear  that  no  circuit  expressible  in  E  can  have  a  behaviour  that  requires 
infinite  time  to  characterize.  That  is,  we  should  be  able  to  find  a  bound  on  the 
performance  of  a  circuit,  after  which  time  we  have  observed  all  possible  behaviour 
from  that  circuit.  The  following  two  functions  find  this  bound. 

3.4  DEFINITION  depth  ;  E  — .  N 

Minimum  time  until  all  external  eignals  are  reaching  expression. 

depth(I;)  *  0,  Vk  6  S, 

depth(v)  ®  0,  Vu  €  V, 

depth(Ako)  A  1  +  depthfo) 

depth((a,  1?))  *  max{depth(a),depth(/3)} 

depth^Da;.^)  ®  max |depth(a),maxU*!!j*‘*''’**“’^{depth(.^,)}} 

depth(izv.a)  &  depth(a) 

After  observing  a  circuit  for  ‘depth’  time  units,  a  state  is  reached  where  no  more 
delay  initialization  constants  are  affecting  the  output.  The  definition  is  quite  simple, 
and  merely  counts  the  maximum  number  of  delays  to  any  expression  root. 

3.5  DEFINITION  ;  E  — •  N 

V  cu.€s^.-  dev 

Period  of  longest  sequence  that  expression  can  produce  with  constant  input. 

perio<}y^j(k)  SI,  Vk  €  S, 

periodtr  ,i(w)  *  1,  Vw  ^  V 

pcriodv  ,i(w)  s  {sire(type(w)))‘',  Vv  e  V 

periodv,d(A*a)  s  periodv,rf+,(oi) 

periodv,d((a,/?))  ®  periodv.rf(a)  x  periody, ,<(/(?) 

periodv,,(Da:.^)  s  pcriodv,,{o)  x  max{n,tn  ^') 

VP  C  {periodv,,(X,),...,periody,,(>l,i.,„ype(„,))} 
s.t.  ffP  <  periody,,(o) 
periodv,i(/»«"-o)  -  Petiodvu{»).4(o) 
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The  behaviour  of  any  circuit,  as  explained  above,  must  be  in  some  sense  periodic; 
after  a  long  enough  time,  the  output  will  begin  to  repeat,  assuming  external  signals 
are  held  constant.  This  latter  can  be  assumed  because,  in  equivalence  checking, 
external  signals  are  given  a  constant  valuation  anyway.  After  time  ‘depth’,  if  ail 
external  signals  are  held  constant,  only  the  recursive  operator  is  capable  of  originating 
a  non'constant  output.  The  maximum  possible  period  of  a  recursive  loop  depends 
upon  the  number  of  delays  in  its  feedback  loop,  and  the  size  of  its  type.  For  example, 
a  Boolean  loop  with  a  single  feedback  delay  has  a  maximum  possible  period  of  2, 

corresponding  to  the  waveform  T,F,T,F, _  In  general,  a  single-delay  loop  has 

maximum  period  equal  to  the  size  of  its  enumerated  type.  A  Boolean  loop  with  two 

feedback  delays  can  at  most  output  a  sequence  of  period  4,  eg  T,T,F,F,T,T,F,F . 

Hence  line  3  in  the  above  definition:  the  maximum  period  of  a  d-delsyed  loop  is  the 
size  of  the  type  raised  to  the  power  d. 

The  maximum  period  of  a  pair  depends  on  the  periods  of  its  components.  For 
example,  consider  the  pair  of  booleans  (a,  b).  Suppose  a  produces  the  waveform 

T,F, _  and  b  T,T,F,F, _  Then  the  pair  has  period  4;  (T,  T),  (F,  T),  (T,  F), 

(F,  F), _  However,  if  b  had  instead  waveform  T,T,F,  ...,  ie  period  3,  the  pair 

would  have  period  6:  (T,  T),  (F,T),  (T,  F),  (F,  T),  (T,  T),  {F,F), _  Obviously, 

the  period  of  the  pair  is  in  general  the  lowest  common  multiple  of  the  periods  of 
its  components.  Unfortunately,  the  multiple  of  the  periods  of  the  components  must 
actually  be  taken,  since  the  maximum  possible  periods  only  are  known.  For  example, 
if  the  maximum  periods  of  the  components  are  2  and  4  as  above,  then  the  lowest 
common  multiple  is  4.  However,  the  KU>aI  periods  might  be  2  and  3,  ie  the  second 
component  might  not  be  producing  as  large  a  sequence  as  it  could  in  theory.  The 
combined  period  would  then  be  6.  To  ensure  a  large  enough  estimate,  2  times  4  =  6 
must  be  chosen. 

The  period  of  the  case  expression  Oa:A  is  more  difficult.  Basically,  if  the  period 
of  the  chooser  is  p,  then  the  output  of  the  case  can  only  cycle  between  at  most  p 
expressions  in  A.  If  p  is  larger  than  the  size  of  A,  then  obviously  all  expressions  in  A 
can  affect  the  output,  so  the  total  period  is  the  multiple  of  all  of  these,  including  p 
itself.  If  p  is  smaller  than  the  size  of  A,  the  total  period  is  the  multiple  of  p  expressions 
chosen  from  A  together  with  p.  We  have  no  way  of  knowing  which  p  expressions  this 
will  be,  so  we  have  to  choose  the  set  which  yields  the  maximum  multiple. 

The  period  of  a  recursive  loop  has  been  explained  above.  The  ‘period’  function 
keeps  a  track  of  all  dummy  variables  it  has  encountered  on  its  way  into  an  expression, 
BO  that  it  can  deal  with  loops  within  loops.  The  ‘period’  function  is  initially  called 
with  the  set  V  empty,  and  d  =  0. 
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Here  is  an  example  of  the  period  of  a  simple  Boolean  loop: 


period, o(|»v.QAfv:(FT))  =  period,,j,o(DAf¥:(FT)) 

=  l.c.m.  (period,,,  o(Af¥),  period,,,  o{F),  period,,,  o(T)} 
=  l.c.m.  {period, ,,  ,(v),  1,  l} 

=  2*  =  2 

Once  the  period  and  depth  of  an  expression  have  been  found,  the  sum  of  these 
two  values  is  the  time  needed  to  observe  all  possible  behaviour  from  the  expression. 
So  equivalence  between  two  expressions  can  been  determined  by  evaluating  them  for 
all  possible  input  combinations  for  times  0  up  to  this  bound.  Although  this  technique 
can  be  implemented  in  finite  time,  for  circuits  of  any  complexity  it  would  still  take 
far  too  long  in  practice,  since  every  variable  must  be  given  a  constant  valuation  for 
these  times.  We  would  like  to  be  able  to  prove  equivalence  algebraically. 

One  way  of  attempting  this  is  to  reduce  expressions  in  E  into  another  form 
without  recursive  operators.  This  is  done  by  making  use  of  the  identity: 

nv.a  =  ojuXisv.ci) 

This  is  an  expansion  of  the  loop,  in  which  every  occurrence  of  within  the  loop 
is  substituted  by  the  loop  itself.  In  some  senses  the  loop  nv.a  is  actually  the  limit 
of  the  series  of  expansions; 

X. 

alu\X.l 

a|n\oit>\X,)) 

a(v\a(v\a[r\l,)|j 

If  the  period  of  the  loop  |iv.a  is  p,  the  (p+  I)***  line  of  the  above  series  represents 
a  combinatorial  circuit  that  behaves  as  the  loop  does,  up  until  time  p,  whenupon  it 
produces  bottoms.  It  is  therefore  a  finite  approximation  to  the  loop.  If  we  expand 
all  loops  within  an  expression  in  this  way,  to  the  maximum  period  +  depth  of  the 
whole  expression,  then  we  have  formed  a  new,  combinatorial  expression  that  will  do 
everything  that  the  original  expression  did,  but  not  repeatedly.  This  is  enough  to 
decide  equivalence  or  otherwise  between  expressions. 
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The  expanded  expressions  are  in  a  set  which  I  shall  call  E*.  E*  is  like  E  except 
that  there  are  no  longer  any  recursive  operators  and  bottoms  may  appear.  Notice 
that  we  need  bottoms  to  show  that  an  expression  is  an  approximation,  and  was  not 
originally  a  combinatorial  circuit  anyway.  The  following  functions  provide  transfor¬ 
mation  from  E  to  E*.  A  formal  definition  of  E*  appears  in  Appendix  A. 

5.6  DEFINITION  reduce,, ;  E — ►  E* 

de  N 

Approximatts  E  expressions  to  depth  d  in  E*. 

reduce,,(k)  £  fe,  Vfc  6  S, 

reduce,,{f;)  ®  u,  Vv  6  V, 

reduce,,(Ata)  =  A*reduce,,_,(o) 

reduce,,((o,  ,9))  =  (reduce,,(Q:),  reduced(/?)) 

reducCi(Dft:A)  -  □reduce,/(a):  (reducei(A)),*=t*'’^'*'*'**' 

reducej(/iu.a)  n  expsmd,,„„(a) 

‘Reduce’  is  actually  a  trivial  function;  all  it  does  it  find  recursive  subexpressions 
to  apply  ‘expand’  (below)  to. 

3.7  DEFINITION  expand,,  „  ,  :  E  — .  E* 

d  6  N,  V  €  *7  €  E 

Approximates  a  loop  dj/  expanding  d  times. 

expand,,  .  ,(fc)  ^  k,  Vk  €  S, 

expand,,  . ,  (o')  =  u>,  Vw  €  V,,  w  ^  v 

expand,,.  , (u)  £  -l-,yp,(v).  d  <  0 

expand,,  .  , (u)  e  expand j.  , (-7),  d  >  0 

expand,,., (Ato)  £  Atexpand,,., .  , 

expand,,. ,, ((a, ^))  s  (expand,,., (a), expand,,., (9)) 

expand,,  .  , (Do:/!)  £  Qcxpand,,.  , (a):  (expand^  .  , (>!,))"'  " 

expand,,., (mu'.o:)  £  expand,, „, (expand,,  .,„(a)) 

‘Expand’  keeps  a  record  of  the  loop  variable  it  is  currently  expanding,  the  number 
of  times  it  has  still  got  to  expand  it,  and  the  original  expression  which  is  used  to 
replace  the  loop  variable.  When  it  encounters  inner  loops,  the  function  first  expands 
them  to  the  required  depth  before  continuing  with  the  expansion  of  the  outer  loop. 
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Here  is  an  example  of  the  expansion  of  a  double-loop  expression: 


/«v.DAtv:  (ftw.Da;(AFW,  Afv),  F) 


a 


Expanded  once,  this  becomes; 

□AtQAtXbool:  (□a:(AFXBOOL,  Af-Lbool),  F)  : 
(Da:(AFna:(AFXBooL.  AfXbool)! 

AfDAtXbool:  (Da;(AFlBoou,  AfXbool)i  F)))  F) 


a 
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4.  Equivalence  in  E* 


In  this  section  I  define  a  series  of  functions  which  reduce  expressions  in  E*  to  a 
canonical  form.  Once  in  this  form,  expressions  are  unique,  ie  equivalent  expressions 
are  equal. 

4.8  DEFINITION  pushdown  :  E*  — ►  E* 

Pushes  delays  down  into  an  expression. 


Vn  >  0 

pushdown(Ait,...A/^A;)  =  Aib,...At„A;,  '^k  &  S, 

pushdown(At,  .-At.t;)  s  At,...At„v,  Vv  €  V, 
pushdown(At,...At,(a, /!))  ® 

(pushdown(A/k,...At„Q'),  pushdown(At,  ...Aik„^)) 
pu8hdown(At,...Ak.Oo':.^)  ^ 

□pushdown(At,...At„tt):(pushdown(A»,...A*„A)>‘|!J*‘’''’''“” 
pu8hdown(A*,...A/k,±,)  «  A*,...A*„1, 

4.9  DEFINITION  evaluate,* :  E*  —  E? 
t  €  N 

Evaluates  an  E*  expression  at  time  t. 


Vn  >0 

evaluate^(At,...At„fc)  s  ifc,  Vit  6  5,,  f  >  n 
evaluate*{At,...A»„A:)  e  k,+i,  €  S„  t  <  n 

evaluate^(Ak,...At,v)  e  v,_„,  Vu  6  V„  t  >  n 
evaluate^(Aik,-At„v)  e  Vv  €  V,,  f  <  n 

evaluate;(A*,...At„±,)  s  j.„  t  >  n 
evaluate, *(A*,...A*,1,)  e  fc,,  t  <  n 
evaluate^ (( a,  ^))  s  (evaluate*(a),  evaluate^(/I)) 

evaluate* (Oa:^)  s  □«valuatei(a):  ^evaluate^(^j) . . .  evaluate^(^,i„(typ,(a)))) 


E*  represents  E*  restricted  to  time  t.  Expressions  in  ^  no  longer  contain  delays, 
and  all  variables  in  such  expressions  have  an  index  which  gives  the  time  (<  ()  at  which 
their  value  is  to  be  taken.  Note  however  that  variables  us  retained:  they  are  not 
given  a  constant  valuation.  So  an  expression  in  E*  of  depth  +  period  d  can  be 
represented  by  its  evaluations  in  Eo  to  E^ 

Note  how  ‘evaluate^  operates  only  on  expressions  in  the  form  produced  by  ‘push¬ 
down’,  ie  with  delays  at  the  roots  of  the  expression. 
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4.10  DEFINITION  formperm  :  Ef — ►  E,* 

Traruformt  D’t  into  constant  permutations. 

formpeTm(fc)  «  J,  Vk  €  S, 

formpertn(vi)  *  Vu  €  V, 

formp«nn((a, /9))  »  (formperm(a),formperin(^)) 

formperm(Qa:(^...4))  ^  A 

foTmpeTin(aai(Kt,...,Ki.i,Ai,...,An})  * 

formperm  (D(Ai,  U ...  U  l-i  LI ...  U 

where  m  =  8ize(type(A)) 

Kf  e 

formperm(Da::(A'i...A’n))  ®  Dforinperin(ft):(ki...t„) 
formperzn(J.,)  * 

A  permutation  is  a  case  expression  with  all  variables  moved  into  the  chooser;  eg 

((T,  T),  (T,  T),  (F,  Xbooi),  (Xbooi,  Xbool),  (F,  F),  (T,  F),  (F,  F),  (F,  F)> 

I  call  case  expressions  in  such  a  form  permutations  since  they  permute  their 
chooser:  for  example,  if  n  belongs  to  the  enumerated  type  (1,2,3)  then  □n;(2,3, 1) 
has  a  similar  meaning  to  the  mathematical  permutation  (l,2,3)n.  Notice  that  in 
line  4  of  the  above  definition,  the  identity  permutation  is  removed. 

4.11  DEFINITION  canon  ;  E.*  —  Ef 

Reduces  E*  to  a  canonical  form. 

canon(k)  *  k,  Vk  €  S, 
canon(vi)  «  v„  Vv  €  V, 
canon{X,)  =  X, 

canon((Oa:^,  k))  s  Oq:((Ai,  k)...(An,  k)} 
canon((Da;A,  Vt))  = 

contract ^canon^Ov,:  (Do:{(Aj,  (Sty^^^))i)...{A„, 
canon((aa:A,  X,))  s  □a:((Ai,  X,)...(A„,  X,)) 
canon((aa:A,  (/Jt-ir)))  ® 

canon  ^a(/?,  k):  (na:((Xi,  (S„p^o,,)))v)...(>In, 

canon((Do:>I,D/?:B))  =  canon  (Oa:  {O0-.{{A.,  B,)...{A„ 
canon((k,aa:A))  ®  □a:((fc,  Ai)...(fc,  ^„)} 
canon((vi,Da:^))  ^ 

contract ^canon^Dv,:  (□o;(((5typ^,))i,  .^i)...((Styp^p))i, 
canon((X„aa:A))  *  Da;((X„  A,)...(X„  A„)) 
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cvion(((a,;9),a')(:>l))  « 

canon^D(a,^):  {Q'ir:(((^typ«((a, #)))•<  ^i)"-{{5typ«((n,^)))<» 
canon((a, /9))  «  (a,0) 
canon(aa;:(>(.../))  ^  A 
canon(D/c:^)  ^  canon(^„(k)) 

canon(a«;,:/)  «  Qi;,: (canon(^i|o,\(5,yp^.)),))...canon(^„lv,\(^typ.(v))r.l)} 
canon(ax,:^)  «  X.yp^ji,) 

canon(D(o!, ^):/)  *  contract^canon(0^: j 
where  n  =  size(type(a)),  m  =  size(type(/9)) 
canon(Daa:^:B)  ^  □a:{canon(D8i:^)...canon(QS„:>()) 

‘Canon’  operates  on  E*  expressions  which  have  been  processed  by  ‘formperm’. 
It  reduces  expressions  to  a  canonical  form.  The  canonical  form  is  that  of  a  single 
large  permutation,  with  all  input  variables  paired  together  in  alphabetical  order  in 
the  chooser.  The  chooser  is  also  flattened  so  that  pairs  can  only  occur  as  the  right 
hand  component  of  other  pairs; 


D(3.,(b„(c,,(...)))):(K„...,/f„) 

All  combinatorial  circuits,  and  therefore  all  expressions  in  £*,  can  be  represented 
uniquely  in  this  form.  The  function  ‘canon’  uses  a  number  of  standard  though  lengthy 
transformations  on  Ef  to  attain  this  form. 

4.13  DEFINITION  contract :  Ef  —  E^ 

Contracts  nested  D’s  into  a  single  □. 

contract(Qvi:{Qu/|:A,))  * 

contract  (□(W|,  V();>lj  U  ...  U  An)  w  <  v 

contract  (□(«„  v)  >  v 

contract(D(tj(,a):{Qwi:Ai))  ® 

contract  (□(«;(,  (U(,  a)):/li  U  ...  U  A„)  v»  <  r 

contract^Qvi:^contract{Da;(Du>(:Ay+i)'’'o*'''”**''**”'))  _j*  w  >  v 

contract(Da:{ifi...K„»  ®  Dor;{ff|...K„) 

contract(at;.:(a(Q,8):^))  ®  D(u„  (a, 

‘Canon’  expands  cases  where  the  chooser  is  a  pair  into  a  case  of  a  single  variable 
where  the  expressions  in  the  choice  sequence  are  ‘internal’  cases  of  similar  form.  It 
does  this  so  that  it  can  easily  determine  redundancy.  For  example,  the  expression: 

D(y,v):(Ff,,...,K4) 
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is  expanded  to: 


‘Canon’  ia  then  called  again  on  the  result;  inside  the  outer  case  operator  it  substitutes 
all  occurrences  of  the  outer  chooser  v  by  constants: 


Next  the  function  can  simplify  the  constant-chooser  case  expressions: 


The  final  expression  is  in  the  required  form.  However,  in  general  not  all  variables 
will  be  eliminated  because  they  are  redundant,  as  in  this  case.  If  the  original  equation 
had  instead  been: 

Q(w,v):(K„...,K4) 

Then  ‘canon’  would  get  as  far  as  producing 

Dv:{Dw:(K,.Ki),Dw:(K,,K4)) 

But  could  obviously  simplify  this  no  further.  This  expression  is  not  however  in  the 
required  canonical  form.  The  function  ‘contract’  is  required  to  bring  the  inner  case 
expressions  out  once  more: 


D{v,w):(A-,./f„/fr,K4> 

Note  that  ‘contract’  brings  w  back  into  the  main  chooser  in  alphabetical  order, 
so  that  in  this  instance  the  order  of  the  sequence  of  constants  has  changed  so  as  to 
preserve  the  sense. 

4.13  DEFINITION  parse^  :  E,*— E,* 

/ :  E,*—  E,* 

Applies  f  to  the  parse-tree  of  ET  expressions 

parse^(k)  *  f{k),  Vfc  €  S, 
parse, (w,)  e  /(v,),  Vu  e  V, 
parse, ((o,^))  e  /((parse,(o),  parse,(/?))) 
parse,(aa:4)  s  /(□par8e,(a):^) 
par8e,(X,)  s  /(x,) 

‘Parse’  is  needed  because  the  function  ‘canon’  expects  that,  when  it  is  applied 
to  an  expression,  the  components  of  that  expression  are  already  in  canonical  form. 
That  is,  it  must  be  applied  from  the  roots  of  an  expression  up.  ‘parse,.„,„’  is  the 
function  which  applies  ‘canon’  in  this  way. 


1$ 


•V 


The  main  reason  why  this  is  necessary  is  that  ‘canon’  must  float  case  operators 
to  the  outside  of  pairs.  If  the  function  is  given  a  pair,  it  must  know  that  there  are  no 
case  expressions  hidden  deep  within  the  pair’s  structure.  Hence  it  must  be  applied 
from  the  roots  of  the  pair  upward  to  float  any  cases  up  through  the  structure. 

4.14  DEFINITION  sj 

deV 

Givet  equivalence  between  two  expreseion  in  E  to  depth  d. 
a=l0  ^  parsej„o„(evaluatej(pushdown(o)))  = 

Vf  <d 
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5.  The  Equivalence  Theorem 


S.l  THEOREM  a  —  0  iff  reduce^(a)  =J  reducei(/3) 

where  e  depth(a)+depth(^)+max  {period,o(“).  period, o(/3)} 


Proof: 

There  are  two  stages  to  the  proof  -  the  first  is  to  show  that  the  depth  d  of 
expansion  defined  above  is  sufficient  to  preserve  uniqueness  of  expressions;  the  second 
is  to  show  that  equivalence  in  E*  as  defined  in  4.14  corresponds  to  equivalence  in 
£  for  expanded  expressions.  This  is  just  a  matter  of  showing  that  the  functions 
‘pushdown’,  ‘formperm’  and  ‘canon’  do  not  alter  the  meaning  of  expressions,  and 
that  the  final  canonical  form  is  indeed  a  unique  representation  of  expressions.  The 
latter  is  clear  from  the  nature  of  the  form,  and  from  the  fact  that,  if  the  canonization 
functions  are  indeed  correct,  then  they  are  certainly  able  to  transform  any  expression 
into  the  form. 

To  show  the  canonization  functions  are  correct,  we  must  prove  the  validity  of 
every  line  of  these  functions.  For  example,  to  show  that  the  line 

canon((aa:^,  <:))  =  Da:{(^i,  fc)...(^„,  *)) 
is  correct,  we  must  demonstrate  that,  in  E. 


(Qa:>l,fc)=Da:((>l„fc)...(>I„,fc)> 

This  is  done  by  using  ‘evaluatet,v’  on  each  side  of  the  equivalence: 

evaluate,,v(Da:{(^j,*)...(.^„,Ar)))  =  evaluate,y((^i»  fc)) 

=  (evaIuatet,v(A)»  evaluate,,v(fc)) 

=  (evaluate), v(Oa:^),  evaluate), v  (A:)) 

=  evaluate),v((no::/',  k)) 

For  some  some  i  dependant  on  V;  for  all  V.  All  lines  of  the  functions  ‘pushdown’, 
‘formperm’,  ‘canon’  and  ‘contract’  can  be  proved  in  this  way. 

The  difficult  part  of  the  proof  is  showing  the  depth  of  expansion  is  sufficient. 
We  must  show  that  no  expression  in  E  can  produce  a  sequence  of  outputs  whose 
period  is  greater  than  that  predicted  by  the  ‘period’  function.  An  idea  of  the  proof 
of  the  validity  of  this  function  for  case  and  pair  expressions  has  already  been  given,  in 
section  S.5.  But  the  formal  derivation  of  the  period  of  a  recursive  expression  ought 
to  be  given. 
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Consider  a  single  loop  represented  by 


Vi  =  /(vi-i) 


The  loop  function  /  depends  on  only  one  variable,  so  that  it  can  do  at  most  p  different 
things,  where  p  is  the  sice  of  the  type  of  v.  Clearly  the  period  of  this  function  is 
therefore  at  most  p.  In  general  a  single  loop  can  be  represented  by 

Here  the  function  /  depends  on  n  variables,  so  that  its  period  is  at  most  p”. 

Now  for  the  case  of  two  loops,  one  inside  the  other.  We  have,  for  example, 


Vt  =  /(tJ,-l,U)|) 

where 

w,  = 

Substituting, 


Vt  =  f(vt-i,g{u),.i,v,.i)). 
This  can  be  rewritten  as  a  single  function,  say  h: 

Vt  =  h(u,-i,u;,.i). 


Clearly  the  maximum  period  of  thu  is  pg  where  p  is  again  the  size  of  the  type  of  v, 
and  q  the  size  of  the  type  of  w.  This  is  indeed  the  result  that  ‘period’  would  produce. 

This  argument  csui  easily  be  generalized  to  deal  with  any  number  of  nested  loops 
with  any  number  of  delays  in  their  feedback. 
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6.  Conclusion 


Although  lengthy,  I  un  reasonably  confident  of  the  accuracy  of  the  equivalence 
testing  process  described  above.  However  there  are  a  couple  of  problems  in  the 
application  of  this  theory  which  are  still  to  be  overcome. 

Complexity 

The  main  cause  for  concern  is  in  the  expansion  of  E  expressions.  For  non-trivial 
circuits  with  complicated  nesting,  the  expanded  expression  becomes  extremely  large 
very  quickly.  However,  this  growth  may  be  limited  in  a  clever  implementation  of  the 
expander,  by  considering  that  the  roots  of  the  expanded  expression  are  all  the  same. 
Hence  tree-storage  optimization  is  applicable  to  reduce  the  size  of  the  expanded 
expression  to  near  the  size  of  the  original. 

The  ideal  form  in  which  to  implement  all  the  functions  described  above  would  of 
course  be  a  functional  language.  A  good  functional  language  (see  |4])  only  requires 
storage  for  the  root  of  the  expression  it  is  currently  processing.  This  again  avoids 
the  explosion  of  storage  of  the  expanded  expression. 

Data  Refinement 

The  theory  described  can  only  compare  expressions  with  tbeJWne.  inpujjrariables- 
If  it  is  desired  to  test  equivalence  between  one  circuit  and  another  which  is  thought 
to  be  a  data-refinement  of  the  first,  then  a  function  must  be  added  around  the  latter 
which  converts  the  original  input  variables  to  the  new  form.  For  example,  it  might 
be  necessary  to  convert  separate  read  and  write  lines  into  a  single  read/write  signal 
by  use  of  a  case  expression. 

The  Undefined  Value 

In  the  equivalence  theory,  bottoms  or  tops  must  be  inaccessible  to  the  user;  oth¬ 
erwise  some  of  the  transformations  in  functions  such  as  ‘canon’  are  invalid.  Any 
undefined  values  needed  must  therefore  be  just  further  type  constants  and  included 
in  their  S,.  This  may  have  consequences  for  how  such  values  are  considered  by  Ella 
at  the  moment. 


This  concludes  the  description  of  the  equivalence  theory.  1  would  like  to 

acknowledge  the  contributions  of  John  Morison,  who  gave  me  the  idea  for  the  research 
in  the  first  place;  and  Roy  Milner  and  Ian  Currie  for  their  constructive  ideas  and 
criticisms  during  the  progress  of  the  work. 

Mark  Davies,  1988. 
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A.  Technical  Definitions 


A.16  DEFINITION  type  :  E  — .  x* 

Returna  the  type  of  iU  argument. 

type(/b)  «  «,  Vk  €  S, 
type(v)  *  a,  Vw  6  V, 
type(A*a)  s  type(/c) 
type((a,/?))  *  (type(a),type(^)) 
type(Da:^)  *  type(^i) 
type(itv.a)  ®  type(t)) 

A.16  DEFINITION  aite  :  x»  — .  K 

Returns  the  eross-produet  size  of  a  type. 

size(a)  ®  #S,,  Va  6  S 
size(a,t)  s  8ize(8)  x  8ize(t) 

A.17  DEFINITION  welldefo  :  E  x  2®  — 4  B 

Ensures  correct  number  and  type  of  expressions  in  □  output. 

welldcfa(a,^)  ®  A  =  (Ai,Ai,. . .  ,A„) 
n  =  Bize(type(a)) 
type(^,)  =  type(^,)  V«,  j  =  1 . . .  n 

A.18  DEFINITION  welldef^  :  V.  x  E  — >  B 

Ensures  reeuratve  ezpreaaion  is  well  typed  and  will  not  spin. 

wclldef„(v,  a)  s  Ba  G  S  B.t.  type(o)  =  a  =  type(i;) 
no„(a) 
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A.IO  DEFINITION 


no„  :  E  — >  B 
vev. 

Cheeks  there  are  no  undelayeel  v  variailes  in  expression. 

not(k)  ®  True,  Vfc  e  S, 
nOv(w)  =  True,  Vu/  6  V,,  w  ^  v 
no„(v)  «  False 
no„(Ata)  ^  no<luinv(a[) 
no«((a,/J))  «  no„(o)  A  no„(/?) 
no„(Oa:^)  s  no„(a)  A 
no„(/iu>.o)  “  no„(a),  w  ^  v 
no„(fiv.a)  s  False 

A.30  DEFINITION  nodum.  ;  E  —  B 
u  6  V, 

Checks  there  are  no  v  dummy  recursion  variables. 

nodumu(A:)  s  True,  Vfc  6  S, 
nodum,(w)  “  True,  Vtu  6  V, 
noduznc(Ata)  ®  noduin„(o) 
nodum„((tt,^))  ®  nodum^fa)  A  noduin„(/9) 
nodum„(Oa:X)  ®  nodumt(a)  A 
nodun\(#»u;.a)  *  nodum»(a),  ut  ^  v 
noduinv(MV'tt)  ®  False 

A.31  DEFINITION  x*  is  the  least  set  s.t. 

Sex* 

(s,t)  €  x®,  Vs,t  6  X* 

A. 32  '  DEFINITION  St  is  defined  for  T  €  x*  as  follows: 

S,  -  S„  Vs  6  S 

5(r,r)  =  Ut^^(((5r).,(5r).)-((5r)n,(Sr).)) 
vr,r  6  X* 

A. 33  DEFINITION  E*  is  the  least  set  s.t. 

5,  C  E*  Vs  6  S 

V,  C  E*  Vs  6  S 

Ata  €  E*  Va  6  E*  Vfc  6  S,  s.t.  type(o)  =  s 
(a,^)€E*  Va,/9€E* 

□a;j<  €  E*  Va  6  E*  VA  C  E*  s.t.  weIldefD(a,yI)) 
J.,  6  E  Vs  6  S 
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